Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

detecting 15 infection in AWS SDK #29

Open
rajeevkk32 opened this issue Jul 30, 2021 · 1 comment
Open

detecting 15 infection in AWS SDK #29

rajeevkk32 opened this issue Jul 30, 2021 · 1 comment
Labels
question Further information is requested

Comments

@rajeevkk32
Copy link

HI,
It is detecting 15 infections including TROJAN , ROOTKIT & BACKDOOR.
Please help me in this. I am confused.
composer require aws/aws-sdk-php
https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/getting-started_installation.html

@marcocesarato
Copy link
Owner

marcocesarato commented Jul 31, 2021

Hi, this antimalware detects some unconventional code patterns often used on malware to obfuscate code or do malicious operations, but not all of these are real malware but they could be false positives, and this usally happen on complex library like aws sdk.

So the way is to download the library again or detect if it is real malware or not is to check the line of code found and figure out if it is doing something dangerous or is it just a "bad practice" or a code pattern "not conventional".

Usually using the --only-signatures flag should be more secure and detect fewer false positives.

@marcocesarato marcocesarato added the question Further information is requested label Jul 31, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants